Analyzing Security Vulnerabilities in XWiki